WHAT IS CLAIMED IS: 



1 L A method of determining whether a multi-component target system meets a given 

2 multi-part performability requirement, the method comprising: 

3 operating on a representation of the target system, providing a first failure- 

4 scenario analysis of said target system, 

5 generating a multi-part performability function of said target system using said 

6 first failure-scenario analysis, 

7 comparing said multi-part performability function with said multi-part 

8 performability requirement, and 

9 determining from said comparing whether said target system meets said multi- 
1 0 part performability requirement. 

1 2. The method as set forth in claim 1, the step of comparing further comprising: 

2 calculating if said first failure-scenario analysis provides sufficient data for 

3 generating a multi-part performability function determinative of target system 

4 performance capability when compared to said multi-part performability requirements, 

5 and 

6 if so, proceeding with said step of determining, or 

7 if not, providing a second failure-scenario analysis of said target system; and 

8 repeating said steps of generating, comparing, and calculating until a next failure- 

9 scenario analysis provides sufficient data for generating a multi-part performability 

1 0 function determining said target system performance capability when compared to said 

1 1 mult i -part performability requirements. 

1 3. The method as set forth in claim 1, wherein said multi-part performability 

2 requirements are represented as one or more performance levels versus percentage of 

3 time at each of said performance levels. 

1 4. The method as set forth in claim 3, wherein the step of generating a multi-part 

2 performability function comprises: 

3 creating a multi-part performability curve as one or more performance levels 

4 versus percentage of time at each of said performance levels, 

1 5. The method as set forth in claim 1, the step of operating on a representation of the 

2 target system comprising: 

3 synthesizing a model of the target system based on predetermined individual 

4 components of the target system wherein each of said components has a characteristic 

5 failure specification. 

1 6. The method as set forth in claim 5, further comprising the steps of: 

2 combining one or more said components as a macro-component; 

3 computing the failure probability of the macro-component as a function of the 

4 failure probabilities of its respective one or more components; and 

5 using macro-components in said failure-scenario analysis. 
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1 7. The method as set forth in claim 1, wherein the step of prjDviding a first failure- 

2 scenario analysis of said target system comprises performing a failure-scenario analysis 

3 in accordance with the further steps of: 

4 let "FP(c)" denote a probability that a system component "c" of the target system 

5 will fail; then, 

6 (1) Let "D" represent a failure-free system; 

7 (2) Let ci, C2. . Xmf be components that can fail independently in D; 

8 (3) Let "sf ' be the number of concurrent failures being considered in the 

9 last invocation (initially 0); 

1 0 (4) Let "s" be the ordinal number, among the scenarios with exactly "sf ' 

1 1 failures, of the scenario returned in the last invocation (initially 0); 

1 2 (5) If there exist exactly "s" scenarios with "sf ' concurrent failures, then sf 

13 =sf+l;s = 0; 

14 (6) If sf < mf, then s = s+1, otherwise exit; 

1 5 (7) choose ai, a2. . .agf (where ai, i=l, . . . sf are different integers between 

16 1 and mf) such that there are exactly "s-T* scenarios with "sf ' concurrent 

1 7 failures more likely to occur than Cai, Ca2. . -Casf ; 

1 8 (8) set sc = D with components Cai, Ca2. . .Casf marked as failed; 

1 9 (9) set p = FP(Cai) X FP(Ca2) X ... X FP(Ca(sf)) X (1-FP(cm))x . . .X (1- 

20 FB(Cb(mf-sf)))^ where Cbi,. . .Cb(mf-sf) are all the components that did not fail 

21 in"sc";and 

22 (10) return (sc,p). 

1 8. The method as set forth in claim 1, the step of providing a first failure-scenario 

2 analysis of said target system further comprising: 

3 eliminating analysis of all failure-scenarios wherein said target system is non- 

4 functional in accordance with said multi-part performability requirement, and 

5 eliminating analysis of all failure-scenarios wherein said target system is fully 

6 functional in accordance with said multi-part performability requirement. 

1 9, The method as set forth in claim 8, the step of generating a multi-part 

2 performability function comprising further steps of: 

3 entering a multi-part performability function indicative of all failure-scenarios 

4 wherein said target system is non-functional; and 

5 entering a multi-part performability function indicative of all failure-scenarios 

6 wherein said target system is fully functional in accordance with said multi-part 

7 performability requirements . 

1 10. The method as set forth in claim 1, the step of providing a first failure-scenario 

2 analysis of said target system comprising: 

3 failure-scenarios are repetitively entered based on an order beginning with a most 

4 likely failure-scenario. 

1 11. The method as set forth in claim 10, comprising the steps of: 
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2 if a multiplicity of like components having like failure probability and effect are 

3 employed within said target system, treating said multiplicity of like components as a 

4 single component of said target system. 

1 12. The method as set forth in claim 1, further comprising: 

2 verifying an equation for a predetermined target system and given multi-part 

3 performability requirements: 
4 

5 M 

6 2 OP(Si)l(U(Si) > n ) > fi, for j=l,2,. . .n 

7 k=l 
8 

9 where "j" is a failure-scenario among failure-scenarios with "i" failures, returned 

10 in the last invocation, and performance of the target system is at least rj with probability 

1 1 fj, or greater, for each given pair (rj,fj). 

1 13. The method as set forth in claim 12, the step of verifying the equation further 

2 comprising: 

3 (1) seti = l; 

4 (2) generate a next state Si and its occurrence probability OP(Si), from 

5 said step of generating the next failure scenario; 

6 (3) compute U(Si) using a performance predictor; and 

7 (4) if 
8 

9 i 

1 0 Z OP(Sk)l(U(Sk) > rj) > fj, for all j=l,2,. . .n, 

11 k=l 
12 

1 3 then the target system is capable of fulfilling the multi-part 

1 4 performability requirements, exit and report; or 

15 (5) if: 
16 

17 i 

1 8 E OP(Sk)l(U{S!c) < rj ) > 1-fj, for any j=l,2,. . .n, 

19 k=l 
20 

21 then the target system fails the multi-part performability 

22 requirements, exit and report; and otherwise, 

23 (6) set i = i +1 and go to step (2). 

1 14. A computer memory comprising: 

2 computer code operating on a representation of the target system, providing a 

3 first failure-scenario analysis of said target system; 

4 computer code providing a first failure-scenario analysis of said target system; 
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5 computer code generating a multi-part performability function using said first 

6 failure-scenario analysis; 

7 computer code comparing said multi-part performability function with said multi- 

8 part performability requirements; and 

9 computer code determining from said comparing whether said target system has a 
1 0 capability of performing said multi-part performability requirements. 

1 15. The memory as set forth in claim 14, the computer code comparing further 

2 comprising computer code: 

3 calculating if said first failure-scenario analysis provides sufficient data for 

4 generating a multi-part performability first function determinative of predicting multi- 

5 part performability when compared to said multi-part performability requirements, and 

6 if so, proceeding with said step of determining; or 

7 if not, 

8 providing a second failure-scenario analysis of said target system; 

9 repeating by generating a multi-part performability next function; 

1 0 comparing said next function with said multi-part performability 

1 1 requirement; and 

1 2 calculating until a next failure-scenario analysis provides sufficient data 

1 3 for generating a multi-part performability second function determinative of 

1 4 predicting multi-part performability of said system when compared to said multi- 

15 part perf ormabili t y requirements , 

1 16. The memory set forth in claim 15, the computer code providing a first failure- 

2 scenario analysis of said target system further comprising: 

3 eliminating all failure-scenarios wherein said target system is non-functional; and 

4 eliminating all failure-scenarios wherein said target system is fully functional in 

5 accordance with said performance requirements. 

1 17. The memory as set forth in claim 16, the code providing a first failure-scenario 

2 analysis of said target system further comprising: 

3 failure-scenarios are repetitively entered based on an order beginning with a most 

4 likely failure-scenario. 

1 18. A method of doing business of verifying performability of a target system having 

2 predetermined components and predetermined multi-part performability requirements, 

3 the method comprising: using a computer, 

4 (1) operating on a representation of the target system, including providing a 

5 failure-scenario analysis of said target system; 

6 (2) generating a multi-part performability curve using said failure-scenario 

7 analysis; 

8 (3) comparing said requirements with said curve ; 

9 (4) determining from said comparing whether said target system has the capability 

10 of performing said multi-part performability requirements; and 

1 1 (5) generating a report indicating of results whether said target system has the 

1 2 capability of performing said multi-part performability requirements. 
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1 19. The method of doing business as set forth in claim 18 further comprising: 

2 calculating if a first failure-scenario analysis provides sufficient data for 

3 generating a multi-part performability curve determinative of whether said multi-part 

4 performability requirements are satisfied; and 

5 if so, proceeding with said step of determining, or 

6 if not, 

7 providing a second failure-scenario analysis of said target system; 

8 repeating the processes of generating a multi-part performability curve; 

9 comparing said requirements with said curve; and 

1 0 calculating until a next failure-scenario analysis provides sufficient data 

1 1 for generating a report predicting multi-part performability of the target system 

1 2 with respect to said requirements. 

1 20. The method as set forth in claim 19, the step of providing a first failure-scenario 

2 analysis of said target system comprising: 

3 failure-scenarios are repetitively entered based on an order beginning with a most 

4 likely failure-scenario. 

1 21 . A method of reporting performability of a given data storage system under a 

2 given system performance requirements specification, the method comprising: 

3 generating a plurality of failure scenarios indicative of individual component 

4 failures; 

5 determining performance states of said system under each of said failure 

6 scenarios; 

7 comparing a function indicative of said performance states to said system 

8 performance requirements specification; and 

9 based on a comparison derived from said step of comparing, reporting whether 

1 0 the performability of the given system meets the given system performance requirements 

1 1 specification 
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